SC-300 Practice Question 3497
Exam: SC-300
Domain: Plan and automate identity governance
Difficulty: medium
How can you require that a user must complete an MFA challenge each time they activate an eligible role in PIM?
Answer Options
A
Enable "On activation, require Microsoft Entra Multifactor Authentication"
B
Disable MFA tenant-wide in Security Defaults
C
Require users to submit written paper approval forms to HR
D
Force users to reboot their laptop before activating roles
Correct Answer
A: Enable "On activation, require Microsoft Entra Multifactor Authentication"
Explanation
In PIM role settings, enable "On activation, require Microsoft Entra Multifactor Authentication" to force users to complete MFA during activation.